NetKnow Corporate Blog

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 06:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkhrV-00000000Bhf-2igI

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 06:40:17 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 06:40:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f171.google.com ([209.85.214.171]:55356)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkgpR-000000008Gb-3d0p

for sales@nk.ca;

Fri, 17 Jul 2026 05:34:17 -0600

Received: by mail-pl1-f171.google.com with SMTP id d9443c01a7336-2caf228a910so59999655ad.2

for ; Fri, 17 Jul 2026 04:33:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1784287992; x=1784892792; darn=nk.ca;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=JQUgmTcfXpvfzE3f03R8/xFlP/o9eTkvFUFP0IwQOck=;

b=AcyQXmo7K5uEcu42v3pnNrmQgyU+6RdKZYmyoKXePXn0rbMCwvsMqGYboq8FIrNyoS

084g4sjL3bPADnVB5hWHuQZss+cY+Lw7rZdl2EDdCY1gXDezdFQ0WI7kJlXdTvTukBSe

jW85eUy0bVhwYjV4m+GvlMqvjBsxlYnvoTHEfl1SbMZ/K+bcBjD3mmqkYI5/x1ttALZ2

GMyeykqXPO1PICMHkkIga7aJ5sI7ww6LOZcbexwc4E/XKja1TYgyzRX9SsPoh7zP25Xx

RLMMGWJIFXWG1NLk0QMqXeW1/H1ErW5LehGQXu/o6IivvN4GRDeio45UQQXik5J4f3Sr

SG/Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784287992; x=1784892792;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=JQUgmTcfXpvfzE3f03R8/xFlP/o9eTkvFUFP0IwQOck=;

b=HHTWwC7H9zuNrLZ04wPnO9Gct6r5mBg4/8o8TOUbihPmY2LP0b60r10ISrnaufuR6j

PVCX7mh2qpXyDNh8bCzpz1sdE525vLBquUlqphdNAmXO/Sy138+FDCRCpHVqRtGoN91k

xE4u04mfEMOXH5m2VyCp7BgNNdPSdzzrQ7xdOlRqy+mxk6oOYSPKYFKWdhr+BJXgjf5E

BEBcbh5kzSwcbhgdP5XdH/l11ON/ONMzhuSx3E9imMXXfZzWGjqhVDTMreCRXwFhbF6V

POsEugW+MSCEodi70HbFyq+BXKQKbxYArSRP+IiB8fvkzAKjdwNSGUVWa3Tc2SS4woFc

70WQ==

X-Gm-Message-State: AOJu0YxkhgfL2kLHLKRZ76kKnl4qkG2cV4sayI6lIwXXybVcNA91tRGL

E9v1pEoXtM9uyGLcu+vTAk0rESOfYYB2bCyGa3VUpivg3y/zEVwdNrzVukzg+vpHSWA=

X-Gm-Gg: AfdE7cn1Mu/f0fGnlZ+nWjwYoIgxkRnVU9RfHk0+ktKYEelEr4/1RG5w8nKjyjm41xz

eeJjkLPB1xYvIdSllxz7dcAKeLApJh9gh1c3QZXWOcw4pNPk+wxU9olF5oihJQED4ZAwYo++r/9

6RPAVVc+vnd5v7mPE05lfSQ71py0sjDE644Na30ijQPQzgmzcwYd/+09CAS2xIaaFzf8shxfAYN

KXW/ITvqUf/sBuIWYt0BnzlaAALxJfWrj1IemGsylEXOJIJXapsRE9k0x7ZxdrV7RsE1ro6dKRw

Aqg+lOxqcAjyGuKz7/wYFOuMBnUOpB+D7cR0BpVJ6A88/85KannL92dNI8vrvgdVAEAvs5Zyf8x

xYcteSiXZzjSu2SXV0fNCbVGxEgvfXwWvag+IVFtRai4tQ6LTlFvwj74p+N89D8Keb3KyZcHOM+

oDa4bxb8WIT6AZwK/7nuyWDw==

X-Received: by 2002:a17:903:f8c:b0:2c6:9d3d:dfbd with SMTP id d9443c01a7336-2cf34866be5mr23521665ad.16.1784287992361;

Fri, 17 Jul 2026 04:33:12 -0700 (PDT)

Received: from DESKTOP5AD1N3E ([2401:4900:8846:6185:d508:75a2:69f0:d8e2])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2cf346d9f9dsm9078685ad.41.2026.07.17.04.33.10

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 17 Jul 2026 04:33:11 -0700 (PDT)

From: "Lauren Smith"

To:

Subject: Re: Checking In Again

Date: Fri, 17 Jul 2026 17:03:04 +0530

Message-ID: <064f01dd15e0$0c94aa30$25bdfe90$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0650_01DD160E.264DA980"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0V373S5MT8eBHBS7af76T46dnwug==

Content-Language: en-us

Disposition-Notification-To: "Lauren Smith"



This is a multipart message in MIME format.



------=_NextPart_000_0650_01DD160E.264DA980

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







I thought I'd send a quick note to reconnect regarding our remote accounting

support services.







If your team ever needs an extra hand with bookkeeping, payroll, tax

preparation support, or routine accounting work, we'd be happy to help.







Would it make sense to have a brief chat?







Best regards,

Lauren Smith







From: Lauren Smith

Sent: Monday, July 13, 2026 6:20 PM

To: sales@nk.ca

Subject: Re: Do You Require Bookkeeping Support?







Hi,







Just following up to see if you're currently exploring remote bookkeeping,

payroll, or tax prep support.







If it's not a priority right now, no problem-just let me know. If that's the

case, we can schedule a quick call to discuss.







Looking forward to your reply.







Regards,



Lauren Smith

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 06:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkhrV-00000000Bhf-2igI

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 06:40:17 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 06:40:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f171.google.com ([209.85.214.171]:55356)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkgpR-000000008Gb-3d0p

for sales@nk.ca;

Fri, 17 Jul 2026 05:34:17 -0600

Received: by mail-pl1-f171.google.com with SMTP id d9443c01a7336-2caf228a910so59999655ad.2

for ; Fri, 17 Jul 2026 04:33:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1784287992; x=1784892792; darn=nk.ca;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=JQUgmTcfXpvfzE3f03R8/xFlP/o9eTkvFUFP0IwQOck=;

b=AcyQXmo7K5uEcu42v3pnNrmQgyU+6RdKZYmyoKXePXn0rbMCwvsMqGYboq8FIrNyoS

084g4sjL3bPADnVB5hWHuQZss+cY+Lw7rZdl2EDdCY1gXDezdFQ0WI7kJlXdTvTukBSe

jW85eUy0bVhwYjV4m+GvlMqvjBsxlYnvoTHEfl1SbMZ/K+bcBjD3mmqkYI5/x1ttALZ2

GMyeykqXPO1PICMHkkIga7aJ5sI7ww6LOZcbexwc4E/XKja1TYgyzRX9SsPoh7zP25Xx

RLMMGWJIFXWG1NLk0QMqXeW1/H1ErW5LehGQXu/o6IivvN4GRDeio45UQQXik5J4f3Sr

SG/Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784287992; x=1784892792;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=JQUgmTcfXpvfzE3f03R8/xFlP/o9eTkvFUFP0IwQOck=;

b=HHTWwC7H9zuNrLZ04wPnO9Gct6r5mBg4/8o8TOUbihPmY2LP0b60r10ISrnaufuR6j

PVCX7mh2qpXyDNh8bCzpz1sdE525vLBquUlqphdNAmXO/Sy138+FDCRCpHVqRtGoN91k

xE4u04mfEMOXH5m2VyCp7BgNNdPSdzzrQ7xdOlRqy+mxk6oOYSPKYFKWdhr+BJXgjf5E

BEBcbh5kzSwcbhgdP5XdH/l11ON/ONMzhuSx3E9imMXXfZzWGjqhVDTMreCRXwFhbF6V

POsEugW+MSCEodi70HbFyq+BXKQKbxYArSRP+IiB8fvkzAKjdwNSGUVWa3Tc2SS4woFc

70WQ==

X-Gm-Message-State: AOJu0YxkhgfL2kLHLKRZ76kKnl4qkG2cV4sayI6lIwXXybVcNA91tRGL

E9v1pEoXtM9uyGLcu+vTAk0rESOfYYB2bCyGa3VUpivg3y/zEVwdNrzVukzg+vpHSWA=

X-Gm-Gg: AfdE7cn1Mu/f0fGnlZ+nWjwYoIgxkRnVU9RfHk0+ktKYEelEr4/1RG5w8nKjyjm41xz

eeJjkLPB1xYvIdSllxz7dcAKeLApJh9gh1c3QZXWOcw4pNPk+wxU9olF5oihJQED4ZAwYo++r/9

6RPAVVc+vnd5v7mPE05lfSQ71py0sjDE644Na30ijQPQzgmzcwYd/+09CAS2xIaaFzf8shxfAYN

KXW/ITvqUf/sBuIWYt0BnzlaAALxJfWrj1IemGsylEXOJIJXapsRE9k0x7ZxdrV7RsE1ro6dKRw

Aqg+lOxqcAjyGuKz7/wYFOuMBnUOpB+D7cR0BpVJ6A88/85KannL92dNI8vrvgdVAEAvs5Zyf8x

xYcteSiXZzjSu2SXV0fNCbVGxEgvfXwWvag+IVFtRai4tQ6LTlFvwj74p+N89D8Keb3KyZcHOM+

oDa4bxb8WIT6AZwK/7nuyWDw==

X-Received: by 2002:a17:903:f8c:b0:2c6:9d3d:dfbd with SMTP id d9443c01a7336-2cf34866be5mr23521665ad.16.1784287992361;

Fri, 17 Jul 2026 04:33:12 -0700 (PDT)

Received: from DESKTOP5AD1N3E ([2401:4900:8846:6185:d508:75a2:69f0:d8e2])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2cf346d9f9dsm9078685ad.41.2026.07.17.04.33.10

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 17 Jul 2026 04:33:11 -0700 (PDT)

From: "Lauren Smith"

To:

Subject: Re: Checking In Again

Date: Fri, 17 Jul 2026 17:03:04 +0530

Message-ID: <064f01dd15e0$0c94aa30$25bdfe90$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0650_01DD160E.264DA980"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0V373S5MT8eBHBS7af76T46dnwug==

Content-Language: en-us

Disposition-Notification-To: "Lauren Smith"



This is a multipart message in MIME format.



------=_NextPart_000_0650_01DD160E.264DA980

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







I thought I'd send a quick note to reconnect regarding our remote accounting

support services.







If your team ever needs an extra hand with bookkeeping, payroll, tax

preparation support, or routine accounting work, we'd be happy to help.







Would it make sense to have a brief chat?







Best regards,

Lauren Smith







From: Lauren Smith

Sent: Monday, July 13, 2026 6:20 PM

To: sales@nk.ca

Subject: Re: Do You Require Bookkeeping Support?







Hi,







Just following up to see if you're currently exploring remote bookkeeping,

payroll, or tax prep support.







If it's not a priority right now, no problem-just let me know. If that's the

case, we can schedule a quick call to discuss.







Looking forward to your reply.







Regards,



Lauren Smith

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Thu, 16 Jul 2026 22:44:00 -0600

Received: from dns74145.phdns13.es ([185.45.74.145]:47785 helo=viniloscasa.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkaQ5-00000000FQZ-2qg2

for dave@nl2k.ab.ca;

Thu, 16 Jul 2026 22:43:39 -0600

Received: from DESKTOP-DQ83S9H.bbrouter (unknown [41.209.14.108])

by viniloscasa.com (Postfix) with ESMTPA id 5D2349FDD;

Fri, 17 Jul 2026 06:29:34 +0200 (CEST)

Authentication-Results: viniloscasa.com;

spf=pass (sender IP is 41.209.14.108) smtp.mailfrom=redes smtp.helo=DESKTOP-DQ83S9H.bbrouter

Received-SPF: pass (viniloscasa.com: connection is authenticated)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: =?utf-8?q?G=C3=BCnstige_Kredite=2E=2E=2E_//_Jetzt_bewerben!?=

To: Recipients

From: redes@doctor.nl2k.ab.ca

Date: Fri, 17 Jul 2026 07:29:31 +0300

Reply-To: financeservice2009@hotmail.com

X-Spam_score: 16.8

X-Spam_score_int: 168

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Es tut mir leid, dass diese E-Mail als unerwünschte E-Mail

in Ihrem Spam-Ordner gelandet ist. Benötigen Sie einen Kredit? Falls ja,

senden Sie bitte eine E-Mail an financeservice2009@hotmail.com und [...]



Content analysis details: (16.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.45.74.145 listed in dnsbl.ahbl.org]

[185.45.74.145 listed in dnsbl.ahbl.org]

[185.45.74.145 listed in dnsbl.ahbl.org]

[185.45.74.145 listed in dnsbl.ahbl.org]

[41.209.14.108 listed in dnsbl.ahbl.org]

[41.209.14.108 listed in dnsbl.ahbl.org]

[41.209.14.108 listed in dnsbl.ahbl.org]

[41.209.14.108 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.45.74.145 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.45.74.145 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.45.74.145 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.45.74.145 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[41.209.14.108 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[41.209.14.108 listed in sbl-xbl.spamhaus.org]

[41.209.14.108 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 TO_MALFORMED To: has a malformed address

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.45.74.145 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[financeservice2009(at)hotmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 T_PDS_TO_EQ_FROM_NAME From: name same as To: address

4.1 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} =?utf-8?q?G=C3=BCnstige_Kredite=2E=2E=2E_//_Jetzt_bewerben!?=



Es tut mir leid, dass diese E-Mail als unerw=FCnschte E-Mail in Ihrem Spam-=

Ordner gelandet ist. Ben=F6tigen Sie einen Kredit? Falls ja, senden Sie bit=

te eine E-Mail an financeservice2009@hotmail.com und geben Sie die unten st=

ehenden Informationen f=FCr die weitere Bearbeitung an.



Angaben zum Kreditnehmer:

Vollst=E4ndiger Name:

Land:

Bundesland/Kanton:

Betrag:

Laufzeit:

Mobilnummer:

Bitte leiten Sie diese E-Mail in Ihren Posteingang weiter, um unerw=FCnscht=

e E-Mails in Ihrem Spam-Ordner zu vermeiden.

Kontaktieren Sie uns f=FCr weitere Informationen:

financeservice2009@hotmail.com

Mit freundlichen Gr=FC=DFen,

Frau Martin Herbert

Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.10.74 listed in dnsbl.ahbl.org]

[40.93.10.74 listed in dnsbl.ahbl.org]

[40.93.10.74 listed in dnsbl.ahbl.org]

[40.93.10.74 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.10.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.10.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.10.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.10.74 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.10.74 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.10.74 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.1 TO_IN_SUBJ To address is in Subject

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.10.74 listed in bl.score.senderscore.com]

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Confirmation_=2D_Bitcoin_Ord?=

=?UTF-8?Q?er_in_Progress_=40_=C5=A1t_16=2E_j=C3=BAl_2026_=28cynthiaperez389903=40group?=

=?UTF-8?Q?s=2Eoutlook=2Ecom=29?=





Haresasz Nxysarwsa has invited you to PayPal Payment Confirmation – Bitcoin Order in Progress

Title: PayPal Payment Confirmation – Bitcoin Order in Progress

When: July 16, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,



Your PayPal payment has been received successfully. We are pleased to confirm that your Bitcoin (BTC) purchase request has been securely registered and is currently under processing.



Transaction Summary:



Payment Method: PayPal

Purchase Type: Bitcoin (BTC)

Amount Charged: $499.99

Order Status: Processing



Your transaction is currently going through our standard verification process. Once the verification is completed, your Bitcoin order will be processed and finalized automatically.



If you do not recognize this transaction, please contact our customer support team immediately at +1 806 317 8411.



Thank you for choosing our services.



Sincerely,

Billing Department

Attendees:



cynthiaperez389903@groups.outlook.com



PayPal Payment Confirmation – Bitcoin Order in Progress

Dear Customer, Your PayPal payment has been received successfully. We are pleased to confirm that your Bitcoin (BTC) purchase request has been securely registered and is currently under processing.



Dear Customer,



Your PayPal payment has been received successfully. We are pleased to confirm that your Bitcoin (BTC) purchase request has been securely registered and is currently under processing.



Transaction Summary:



Payment Method: PayPal

Purchase Type: Bitcoin (BTC)

Amount Charged: $499.99

Order Status: Processing



Your transaction is currently going through our standard verification process. Once the verification is completed, your Bitcoin order will be processed and finalized automatically.



If you do not recognize this transaction, please contact our customer support team immediately at +1 806 317 8411.



Thank you for choosing our services.



Sincerely,

Billing Department

Kedy

štvrtok 16. júl 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie